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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1-6. (Cancelled) 

7. (Previously Presented) An authentication system for transmitting 
information, said authentication system storing identification information of a plurality of 
providing users and a plurality of receiving users and being adapted to 

receive information from at least one of said providing users; 

authenticate said at least one providing user; 

transmit a message including said information via a mobile communications 
network to a receiving user's mobile terminal; 

extract a public key specific to said receiving user from said stored identification 
information; and 

use said further public key for encryption of said at least part of said message. 
8-9. (Cancelled) 

10. (Previously Presented) An authentication system for transmitting 
information, said authentication system storing identification information of a plurality of 
providing users and a plurality of receiving users and being adapted to 
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receive information from at least one of said providing users; 

authenticate said at least one providing user; 

transmit a message including said information via a mobile communications 
network to a receiving user's mobile terminal; 

receive an acknowledgement message or a response message from said receiving 
user; and 

transmit a confirmation message to said one providing user based upon said 
acknowledgement or response message; 

wherein said confirmation message requires an acknowledgement message from 
said one providing user and said authentication system further being adapted to send a 
confirmation message to said receiver user's terminal, notifying the terminal to decrypt 
and display the decrypted part of said message. 

11-19. (Cancelled) 

20. (Currently Amended) A method of transmitting a message via a 
mobile telecommunications network from a sender's device to a user's terminal, 

wherein the user is required to acknowledge receipt of said message in a 
predetermined way and an acknowledgement message is subsequently transmitted to the 
sender of said message; 
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wherein at least a portion of the text message is encrypted by the sender's device 
before tnrasmission transmission and decrypted by the receiving terminal before display; 

wherein the text message comprises a first portion including the body of said 
message and a second portion containing encryption data used for encryption of said 
body and required for decryption of data included in said body; and 

wherein authentication data provided by the receiving user and/or response data to 
said message are encrypted using said encryption data. 

21-27. (Cancelled) 

28. (Previously Amended) A method of transmitting a message via a 
mobile telecommunications network from a sender's device to a user's terminal, 

wherein the user is required to acknowledge receipt of said message in a 
predetermined way and an acknowledgement message is subsequently transmitted to the 
sender of said message; 

wherein in said sender's device and in said receiving user's terminal a transaction 
reference counter is implemented and wherein each of said transaction reference counters 
is incremented if a message is successfully received; and 

wherein a transaction reference is included in every message transmitter from the 
receiving user to the sender. 
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s 

29. (Original) A method according to claim 28, wherein said sender 
compares the received transaction reference with its transaction reference counter and the 
sender only responds if the received transaction reference matches the sender's 
transaction reference counter. 

30-32. (Cancelled) 

33 . (Currently Amended) An authentication system for transmitting 
information, said authentication system storing identification information of a plurality of 
providing users and a plurality of receiving users and being adapted to 

receive information from at least one of said providing users; 

authenticate said at least one providing user; and 

transmit a message including said information via a mobile communications 
network to a receiving user's mobile terminal; 

further being adapted to 

extract a public key specific to said receiving user from said stored identification 
information and to use said further public key for encryption of said at least part of said 
message; 

provide a communication specific public/private key pair valid only for a single 
communication between the authentication system and said receiving user, 
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provide a communication specific p ublic/private key pair valid only for a single 
communication between the authentication system and said receiving user, wherein said 
communication comprises a message and/ef a response to said message; 

encrypt at least part of said message using said communication specific 
public/private key pair; and to 

send said communication specific public key to said receiving user as part of said 
message. 

34. (Previously Presented) An authentication system according to claim 33 
further being adapted to authenticate a receiving user as the recipient of said information. 

35. (Cancelled) 

36. (Currently Amended) An authentication system according to claim 33 
further b e ing adapt e d to r e ceiv e wherein a response to said message comprises an 
acknowledgement message or a response message from said receiving user. 

37. (Previously Presented) An authentication system according to claim 36 
further being adapted to transmit a confirmation message to said one providing user 
based upon said acknowledgement or response message. 

38. (Previously Presented) An authentication system according to claim 37 
wherein said confirmation message requires an acknowledgement message from said one 
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confirmation message to said receiver user's terminal, notifying the terminal to decrypt 
and display the decrypted part of said message. 

39. (Previously Presented) An authentication system according to claim 34 
wherein said user is required to authenticate himself by providing authentication data. 

40. (Previously Presented) An authentication system according to claim 34 
wherein said user's terminal automatically generates said acknowledgement message 
upon supply of said authentication data and/or response data. 

41 . (Previously Presented) An authentication system according to claim 34 
wherein a central authentication system verifies the user's authentication. 

42. (Previously Presented) An authentication system according to claim 34 
wherein said message or a portion thereof is only displayed to the receiving user if the 
receiving user provides a valid authentication. 

43. (Previously Presented) An authentication system according to claim 33 
wherein said message is a SMS message according to the GSM standard. 

44. (Currently Amended) An authentication system according to claim 33 
wherein in said authentication syste m sender's devic e and in said receiving user's terminal 
a transaction reference counter is implemented and wherein each of said transaction 
reference counters is incremented if a message is successfully received. 
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45. (Currently Amended) An authentication system according to claim 44 
wherein a transaction reference is included in every message transmitter from the 
receiving user to the authentication systems eftde? . 

46. (Currently Amended) An authentication system according to claim 45 
wherein said sender compares the received transaction reference with its transaction 
reference counter and the authentication system sende? only responds if the received 
transaction reference matches the sender's authentication system's transaction reference 
counter. 

47. (Previously Presented) An electronic commerce system incorporating 
an authentication system according to claim 33. 

48. (Previously Presented) An electronic voting system incorporating an 
authentication system according to claim 33. 

49. (Currently Amended) An authentication system for transmitting 
information, said authentication system storing identification information of a plurality of 
providing users and a plurality of receiving users and being adapted to 

receive information from at least one of said providing users; 

authenticate said at least one providing user; and 



HAWKES - Amendment Under 37 C.F.R. § 1.111 
Appl. No. 10/521,812 \ 
January 29, 2007 6 



Group Art Unit 2617 
Attorney Docket 1068-5 
Confirmation No. 3775 



transmit a message including said information via a mobile communications 
network to a receiving user's mobile terminal; 

further being adapted to 

extract a public key specific to said receiving user from said stored identification 
information and to use said further public key for encryption of said at least part of said 
message; 

provide a communication specific p ublic/private key pair valid only for a single 
communication between the authentication system and said receiving user; wherein said 
communication comprises a message and/or a response to said message; 

send said communication specific p ublic key to said receiving user terminal prior 
to said communication and store said public key in said mobile terminal; and to 

encrypt at least part of said message using said communication specific 
public/private key pair. 

50. (Previously Presented) An authentication system according to claim 49 
further being adapted to authenticate a receiving user as the recipient of said information. 

51. (Cancelled) 
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52 . (Currently Amended) 



An authentication system according to claim 33- 



49 further b e ing adapt e d to receive wherein a response to said message comprises an 
acknowledgement message or a response message from said receiving user. 

53. (Previously Amended) An authentication system according to claim 52 
further being adapted to transmit a confirmation message to said one providing user 
based upon said acknowledgement or response message. 

54. (Previously Amended) An authentication system according to claim 53 
wherein said confirmation message requires an acknowledgement message from said one 
providing user and said authentication system further being adapted to send a 
confirmation message to said receiver user's terminal, notifying the terminal to decrypt 
and display the decrypted part of said message. 

55. (Previously Amended) An authentication system according to claim 50 
wherein said user is required to authenticate himself by providing authentication data. 

56. (Previously Amended) An authentication system according to claim 50 
wherein said user's terminal automatically generates said acknowledgement message 
upon supply of said authentication data and/or response data. 

57. (Previously Amended) An authentication system according to claim 50 
wherein a central authentication system verifies the user's authentication. 
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58. (Previously Amended) An authentication system according to claim 50 
wherein said message or a portion thereof is only displayed to the receiving user if the 
receiving user provides a valid authentication. 

59. (Currently Amended) An authentication system according to claim 32 
49 wherein said message is a SMS message according to the GSM standard. 

60. (Currently Amended) An authentication system according to claim 49 
wherein in said sender's device authentication system and in said receiving user's terminal 
a transaction reference counter is implemented and wherein each of said transaction 
reference counters is incremented if a message is successfully received. 

61 . (Currently Amended) An authentication system according to claim 60 
wherein a transaction reference is included in every message transmitter from the 
receiving user to the authentication systems eftder. 

62. (Currently Amended) An authentication system according to claim 61 
wherein said sender compares the received transaction reference with its transaction 
reference counter and the sender -authentication system only responds if the received 
transaction reference matches the sender's authentication system transaction reference 
counter. 

63. (Previously Presented) An electronic commerce system incorporating 
an authentication system according to claim 49. 
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64. (Previously Presented) An electronic voting system incorporating an 
authentication system according to claim 49. 



mobile telecommunications network from a sender's device to a user's terminal, wherein 
the user is required to acknowledge receipt of said message in a predetermined 

way; 

an acknowledgement message is subsequently transmitted to the sender of said 
message; 

said user is required to authenticate himself by providing authentication data; and 
a central authentication system verifies the user's authentication; and wherein 

at least a portion of the text message is encrypted by the sender's device before 
transmission and decrypted by the receiving terminal before display, the text message 
comprising a first portion including the body of said message and a second portion 
containing encryption data used for encryption of said body and required for decryption 
of data included in said bod y; and 

wherein said authentication data provided by the receiving user and/or response 
data to said message are encrypted using said encryption data . 



65 . (Currently Amended) 



A method of transmitting a message via a 
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66. (Previously Presented) A method according to claim 65 wherein said 
user's terminal automatically generates said acknowledgement message upon supply of 
said authentication data and/or response data. 

67. (Previously Presented) A method according to claim 65 wherein said 
message or a portion thereof is only displayed to the receiving user if the receiving user 
provides a valid authentication. 

68. (Previously Presented) A method according to claim 65 wherein said 
second portion is unencrypted. 

69. (Cancelled) 

70. (Previously Presented) A method according to claim 65 wherein said 
first portion of said text message is encrypted using a private/public key pair, wherein 
said public key is valid only for a predetermined number of text messages and wherein 
said public key is transmitted in said second portion of said text message. 

7 1 . (Previously Presented) A method according to claim 65, wherein said 
encryption data are valid only for a single communication between the sender and the 
receiving user, said communication comprising said message and a response to said 
message. 

72. (Previously Presented) A method according to claim 65 wherein said 
encryption requires further encryption data stored in the sender's device. 
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73. (Previously Presented) A method according to claim 65 wherein said 
decryption requires further encryption data stored in the receiving terminal. 

74. (Previously Presented) A method according to claim 72 wherein said 
further encryption data is a public key transmitted in a text message, which is transmitted 
prior to said text message. 

75. (Previously Presented) A method according to claim 65 wherein at 
least a portion of said message and/or response message to said message is automatically 
deleted after a predetermined time period from said mobile terminal. 

76. (Previously Presented) A method according to claim 65 wherein 
authentication data are used for encryption and decryption of said portion of said 
message. 

77. (Previously Presented) A method according to claim 65 wherein 
conventional short message protocols and software applications running on the 
communications devices are used to implement the method. 

78. (Previously Presented) A method according to claim 65 wherein said 
message is a SMS message according to the GSM standard. 

79. (Previously Presented) A method according to claim 65 wherein in said 
sender's device and in said receiving user's terminal a transaction reference counter is 
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implemented and wherein each of said transaction reference counters is incremented if a 
message is successfully received. 

80. (Previously Presented) A method according to claim 79 wherein a 
transaction reference is included in every message transmitter from the receiving user to 
the sender. 

8 1 . (Previously Presented) A method according to claim 80 wherein said 
sender compares the received transaction reference with its transaction reference counter 
and the sender only responds if the received transaction reference matches the sender's 
transaction reference counter. 

82. (Previously Presented) An electronic commerce system incorporating a 
method of transmitting a message via a mobile telecommunications network according to 
claim 65. 

83. (Previously Presented) An electronic voting system incorporating a 
method of transmitting a message via a mobile telecommunications network according to 
claim 65. 

84. (New) An authentication system according to claim 36, further being 
adapted to decrypt at least part of said response message using said communication 
specific public/private key pair. 

85. (New) An authentication system according to claim 33 , wherein said 
information received from said providing users is encrypted and said authentication 
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system is operable to decrypt said information before forwarding said information on to 
said user terminal 

86. (New) An authentication system according to claim 85, wherein said 
information is encrypted using a public/private key pair valid only for a single transaction 
between said providing user and said authentication system. 

87. (New) An authentication system according to claim 86, wherein said public 
key is transmitted to said providing user's terminal before said information is received by 
said authentication system. 

88. (New) An authentication system according to claim 87, wherein said public 
key is transmitted to said providing user in response to a request received by said 
authentication system. 

89. (New) An authentication system according to claim 87, wherein said public 
key is transmitted to said user in a prior communication. 

90. (New) An authentication system according to claim 52, further being 
adapted to decrypt at least part of said response message using said communication 
specific public/private key pair. 

91 . (New) An authentication system according to claim 49, wherein said 
information received from said providing users is encrypted and said authentication 
system is operable to decrypt said information before forwarding said information on to 
said user terminal. 
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92. (New) An authentication system according to claim 9 1 , wherein said 
information is encrypted using a public/private key pair valid only for a single transaction 
between said providing user and said authentication system. 

93. (New) An authentication system according to claim 92, wherein said public 
key is transmitted to said providing user's terminal before said information is received by 
said authentication system. 

94. (New) An authentication system according to claim 93 , wherein said public 
key is transmitted to said providing user in response to a request received by said 
authentication system. 

95. (New) An authentication system according to claim 93, wherein said public 
key is transmitted to said providing user in a priori communication. 
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